Dependency Updater

This handles dependency updates across seven languages with a safety-first approach: it auto-applies PATCH and MINOR bumps but prompts you individually for each MAJOR version change. Auto-detects your project type from package files, uses the right tools for each ecosystem (taze for Node, cargo update for Rust, pip-review for Python), and runs security audits when you're done. The workflow is solid: scan, apply safe updates, prompt for breaking changes one by one, then finalize with a lock file update. Particularly useful if you maintain projects in multiple languages or want to avoid the "update everything and pray" approach. Skips intentionally pinned versions and includes diagnosis mode for when things break.

install copies · 90 days. Times the install command was copied on this site in the last 90 days, bots filtered.: 6
skills.sh installs: 4.1K
GitHub stars: 2.7K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add softaworks/agent-toolkit --skill dependency-updater --agent claude-code

Installs into .claude/skills of the current project.

Files

Dependency Updater

Smart dependency management for any language with automatic detection and safe updates.

Quick Start

update my dependencies

The skill auto-detects your project type and handles the rest.

Triggers

Trigger	Example
Update dependencies	"update dependencies", "update deps"
Check outdated	"check for outdated packages"
Fix dependency issues	"fix my dependency problems"
Security audit	"audit dependencies for vulnerabilities"
Diagnose deps	"diagnose dependency issues"

Supported Languages

Language	Package File	Update Tool	Audit Tool
Node.js	package.json	`taze`	`npm audit`
Python	requirements.txt, pyproject.toml	`pip-review`	`safety`, `pip-audit`
Go	go.mod	`go get -u`	`govulncheck`
Rust	Cargo.toml	`cargo update`	`cargo audit`
Ruby	Gemfile	`bundle update`	`bundle audit`
Java	pom.xml, build.gradle	`mvn versions:*`	`mvn dependency:*`
.NET	*.csproj	`dotnet outdated`	`dotnet list package --vulnerable`